$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft File: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json) Hash identifier: BsX5OBAhZWonyki4sCVbY8GF/HFI2LJp3sAyrNyla7Q= Subject key identifier: 5D:78:E8:09:EB:0C:C7:2F:02:02:98:9F:93:68:E4:F6:7F:E1:17:84 Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Certificate serial: 143712A4B3413932E78A6C164290A01183E8A403 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft Manifest number: 01D0 Signing time: Wed 18 Mar 2026 23:10:46 +0000 Manifest this update: Wed 18 Mar 2026 23:05:46 +0000 Manifest next update: Sun 22 Mar 2026 10:42:46 +0000 Files and hashes: 1: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: tBJ1AHKch1UlhiZDg4xVEskfRJgfL+t/HUGXDVJ9VdQ=) 2: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: qlhe8ugwsxt3uspMmDDw6M2qCFy+W45YSb6JDOgXmxg=) 3: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: Ztu1zC4P//Wr/D7wJOmEtvMGkjEYCJfDGpTLJpsLi2U=) 4: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: /paKxP4QMOl7o/KwSLXztrknLwkFvyAYdzpHPBDGP60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:37:12:a4:b3:41:39:32:e7:8a:6c:16:42:90:a0:11:83:e8:a4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Validity Not Before: Mar 18 23:05:46 2026 GMT Not After : Mar 22 10:42:46 2026 GMT Subject: CN=5D78E809EB0CC72F0202989F9368E4F67FE11784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:0c:44:a6:dd:8b:da:f7:ef:85:fd:b1:4d: 6a:b2:8a:18:72:73:5a:62:b5:34:0d:ba:cd:f9:a1: 36:6c:73:c1:9a:2c:6d:95:58:10:df:b4:f6:41:04: f6:46:d3:29:44:4e:df:54:66:69:b2:a8:d8:a6:ec: d7:04:84:fd:01:34:06:27:e2:31:2f:4c:87:fc:86: 8c:12:d0:24:29:38:db:f7:3a:38:26:dd:c1:b6:7b: 43:ab:ac:7b:24:8b:6a:9b:0d:9e:d0:a8:d9:ef:4c: 49:ff:af:36:28:28:77:54:ce:7b:a8:c4:28:a6:c3: a1:93:84:60:94:1e:3d:32:da:6b:3f:bd:3c:ac:b2: bb:ac:ab:e7:e1:59:1e:8c:ad:3f:37:91:e0:5e:44: 9a:b3:d8:a1:4f:52:46:c2:5c:f1:de:02:36:c5:db: ab:11:d5:25:9a:3f:9c:c5:94:02:27:35:f5:75:a5: bd:2d:db:fb:50:20:68:64:bb:9f:ae:1e:82:2f:64: 83:af:6f:f3:ac:e7:01:34:ca:58:70:dd:fc:80:0c: 16:94:75:47:bb:82:e2:17:9e:74:9e:c5:b0:26:34: b6:79:ed:9b:26:d5:ff:f8:d8:61:de:f9:2d:0a:11: cf:4e:f9:6a:b5:2e:0b:16:7a:c0:4f:f3:fc:55:05: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:78:E8:09:EB:0C:C7:2F:02:02:98:9F:93:68:E4:F6:7F:E1:17:84 X509v3 Authority Key Identifier: keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:4c:43:e7:9e:35:18:dd:04:e5:48:da:ce:d1:16:20:7d:88: 22:e5:1d:dc:bc:12:c7:73:07:c7:5e:fc:13:5f:2a:30:45:40: b5:db:8e:85:72:79:38:d8:82:69:86:c9:00:15:e2:b1:89:fe: 2e:f3:0c:92:d4:f5:97:12:e5:58:f0:40:e3:52:ed:a3:43:da: d9:ce:93:0d:87:57:6a:24:ba:dd:ea:61:80:7a:1c:40:7b:88: 40:61:16:b8:24:06:94:40:65:f9:52:c1:38:dc:a3:d7:5e:81: 3d:10:9d:56:9e:36:91:25:a1:14:93:fa:8e:da:df:b2:2f:7e: e7:27:19:e5:a8:86:b9:11:86:6e:44:61:8e:aa:4a:1f:ab:6c: 9d:43:97:48:66:86:fb:f4:17:5e:2b:77:07:d8:77:4d:a6:25: 8c:94:82:4f:04:27:0a:c8:52:3e:73:6c:ed:1f:e6:99:1f:0a: ec:24:f9:38:4c:25:bb:13:44:0a:c4:38:97:f8:8b:a0:b0:41: 5b:23:a2:c6:22:53:e1:ba:85:02:8b:2f:3f:02:b5:27:f5:5d: 2e:6b:64:1a:d7:20:1c:b9:a4:2a:d3:16:1f:70:89:71:9c:a4: 08:a0:85:ef:58:1a:10:17:0f:54:69:9e:c4:a5:ca:f4:15:bb: 11:6f:38:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDcSpLNBOTLnimwWQpCgEYPopAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0 RjFDMUQ1RjAeFw0yNjAzMTgyMzA1NDZaFw0yNjAzMjIxMDQyNDZaMDMxMTAvBgNV BAMTKDVENzhFODA5RUIwQ0M3MkYwMjAyOTg5RjkzNjhFNEY2N0ZFMTE3ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zgxEpt2L2vfvhf2xTWqyihhy c1pitTQNus35oTZsc8GaLG2VWBDftPZBBPZG0ylETt9UZmmyqNim7NcEhP0BNAYn 4jEvTIf8howS0CQpONv3Ojgm3cG2e0OrrHski2qbDZ7QqNnvTEn/rzYoKHdUznuo xCimw6GThGCUHj0y2ms/vTyssrusq+fhWR6MrT83keBeRJqz2KFPUkbCXPHeAjbF 26sR1SWaP5zFlAInNfV1pb0t2/tQIGhku5+uHoIvZIOvb/Os5wE0ylhw3fyADBaU dUe7guIXnnSexbAmNLZ57Zsm1f/42GHe+S0KEc9O+Wq1LgsWesBP8/xVBbvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXXjoCesMxy8CApifk2jk9n/hF4QwHwYDVR0j BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD MUQ1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIx OTA0RjFDMUQ1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJMQ+eeNRjdBOVI2s7RFiB9iCLlHdy8Esdz B8de/BNfKjBFQLXbjoVyeTjYgmmGyQAV4rGJ/i7zDJLU9ZcS5VjwQONS7aND2tnO kw2HV2okut3qYYB6HEB7iEBhFrgkBpRAZflSwTjco9degT0QnVaeNpEloRST+o7a 37IvfucnGeWohrkRhm5EYY6qSh+rbJ1Dl0hmhvv0F14rdwfYd02mJYyUgk8EJwrI Uj5zbO0f5pkfCuwk+ThMJbsTRArEOJf4i6CwQVsjosYiU+G6hQKLLz8CtSf1XS5r ZBrXIBy5pCrTFh9wiXGcpAighe9YGhAXD1RpnsSlyvQVuxFvOIs= -----END CERTIFICATE-----Generated at Thu Mar 19 09:24:15 2026 by rpki-client